gorhill

13 ms·

91.
by gorhill 5y ago
> there is a workaround that involves adding `meta` tags to your pages themselves This does not work, `http-equiv` does not work for `Permissions-Policy`.[1] * * * [1] https://github.com/WICG/floc/pull/47#i
92.
by gorhill 6y ago
> That feels like a bold claim to make without any references "Marble Framework"[1], Wikileaks' Vault 7: > Marble is used to hamper forensic investigators and anti-virus companies from attributing viruses, trojans and h
93.
by gorhill 6y ago
Yes, there is a setting in the dashboard to disable JS by default and enabled as needed.[1] Even more advanced users can set up uBO to work in default-deny mode to only allow resources from specific 3rd-party domains as needed, and on a per
94.
by gorhill 6y ago
The play/pause buttons work fine on my side with default settings/lists. You may have enabled non-default filter list(s) which interfere, or you have custom filters/rules. Use the logger to find out what is being blocked to c
95.
by gorhill 6y ago
It's enabled by default since 1.25.0, but it can be disabled or fine-tuned through advanced settings.[1] In next release, the option is moved from advanced settings to normal user settings, i.e. it will become visible in the Settings p
96.
by gorhill 6y ago
> On review, it does seem to imply that the impetus for the fork is that change: my apologies. No worry. I forked the repo at the same time I transferred ownership. The reason was simply that I wanted to get back at being able to mostly
97.
by gorhill 6y ago
I want to clarify a few points in the article re. uBlock Origin, they might be seen as minor details but to me they matter. > Raymond Hill, after (you guessed it) he transferred ownership of uBlock to a new, untrustworthy maintainer Only
98.
by gorhill 6y ago
In case you are not aware, uBO also allows to wholly disable/enable JS on a per-site basis.[1] --- [1] https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-...
99.
by gorhill 6y ago
Taboola is blocked by default in uBlock Origin.
100.
by gorhill 6y ago
> the security argument is advanced mostly as justification for blocking even unobtrusive ads by people who love to both complain about the terrible state of "mainstream media" Here are documented instances of malvertising I co
101.
by gorhill 6y ago
You can observe `Cookie` header with a webRequest.onHeadersReceived listener. Documentation about what can be observed or not is all available online, there is no need to make any assumption: Firefox: https://developer.mozilla.or
102.
by gorhill 6y ago
In Firefox, extensions with the "Recommended" label have to go through code review with each update[1], and incidentally for a "times around the world" extension, there is FoxClocks with the "Recommended" label
103.
by gorhill 6y ago
I tweeted recently about a research paper which found that the performance argument does not hold, see https://twitter.com/gorhill/status/1345743193179095040
104.
by gorhill 6y ago
> a privacy case in not letting any and every extension have access to all requests. People keep making that argument, and I keep having to correct this. Their webRequest is not blocking but it does support _observing_ all network reques
105.
by gorhill 6y ago
It's not just the code, it's also about what is not filtered in Adnauseum that would normally be filtered in uBO with default settings/lists.
106.
by gorhill 6y ago
> I don't see much difference to my Firefox setup with AdNauseam (uBlock Origin) AdNauseam is not uBlock Origin, you can not use AdNauseam's results to judge uBlock Origin.
107.
by gorhill 6y ago
> It's uBlock that I find causes rendering issues uBO just does what the filters in the filter lists dictate, so when you see specific websites broken as a result of uBO enforcing filters, best is to report these cases to the list m
108.
by gorhill 6y ago
Just for accuracy purpose, I never transferred ownership of the extension in the Chrome and Opera stores -- I considered this would be a breach of trust. The extension in Mozilla's AMO was not handled by me at the time.
109.
by gorhill 6y ago
It's not a personal grudge, and I am not the one who added that filter in the first place[1], though I did not oppose the filter because I have come across numerous instances of people thinking that ublock.org was related to uBO[2]. *
110.
by gorhill 6y ago
> This bind() call makes sure the getter looks like a native function. Exactly what we needed. Even the example given as finally working will show difference with the native method, the bound function will have a property `name` set to `
111.
by gorhill 6y ago
Where did you get the idea that "blocking webRequest API" and "extensions being sold" are part of the same problem requiring to be solved by the removal of the blocking ability of the webRequest API? There are good examp
112.
by gorhill 6y ago
> Chrome is trying to limit use-cases that require full access to every single site you visit That argument is always made and every single time there needs to be a reminder that: The webRequest API -- used to observe all network reques
113.
by gorhill 6y ago
> no UI to manage subdomains You can expand any base domain to see subdomains -- click where there is no text. You can also click the "all" cell to expand to see all subdomains.
114.
by gorhill 6y ago
> I semi worked around it by adding accounts.google.com to my ublock origin block list but about once a month I have to turn it off to allow me to log into Google. This is where uBO's dynamic filtering[1] is useful, as it allows you
115.
by gorhill 6y ago
> the IPC overhead in routing all requests through the extension The case has never been made that this is the issue of why wesites take long to load nowadays, and rather the finding is that content blockers help significantly page load
116.
by gorhill 6y ago
I commented about this in the announcement thread[1]: ==== Though the extension requests the webRequestBlocking permission, that permission is not required to perform the collection of data, including sensitive ones. ==== * * * [1] https:&
117.
by gorhill 6y ago
That article is more than one year old, I prefer to rely on current documentation for reference[1], which says maximum number of rules is 30,000. * * * [1] https://developer.chrome.com/extensions/declarativeNetReques...
118.
by gorhill 6y ago
> it is uncommon for sites to proxy third-party resources onto their own domains Isn't the purpose of Signed HTTP Exchanges to be able to deliver 3rd-party resources from another domain?
119.
by gorhill 6y ago
> Everyone who visits the site will need essentially all of these files. Not necessarily. For instance, I wholly block JavaScript and as a result I could avoid downloading ~283 KB of JavaScript resources from your page (out of ~412 KB re
120.
by gorhill 6y ago
You can block JavaScript with uBO[1], with the added ability vs. NoScript of being able to create rules on a per-site basis.[2] * * * [1] https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-... [2] h

More ›